chore: regenerate lockfile for typescript v7

fix(docker): remove pnpm fetch to fix CI build with patched deps
pnpm fetch in pnpm 11.10.0 tries to apply patches during the fetch phase, failing because packages aren't installed to node_modules yet. Consolidated back to COPY . . + pnpm install. Also bumps: docker/dockerfile 1.10->1.25, typescript ^6->^7, actions/cache@v4->v6, actions/upload-artifact@v4->v7, actions/github-script@v8->v9
2026-07-13 18:54:50 +02:00 · 2026-07-13 18:51:46 +02:00
8 changed files with 3882 additions and 4402 deletions
@@ -23,6 +23,7 @@ jobs:
        with:
          fetch-depth: 0
          ref: ${{ github.head_ref }}
+          persist-credentials: false

      - name: Setup
        uses: ./tooling/github/setup
@@ -60,7 +60,7 @@ jobs:
      TURBO_PLATFORM: linux/amd64
    steps:
      - uses: actions/checkout@v7
-        if: '!env.ACT'
+        if: "!env.ACT"
        with:
          fetch-depth: 0
          persist-credentials: false
@@ -111,7 +111,7 @@ jobs:
      packages: write
    steps:
      - uses: actions/checkout@v7
-        if: '!env.ACT'
+        if: "!env.ACT"
        with:
          persist-credentials: false
          ref: ${{ github.event_name == 'workflow_dispatch' && inputs.ref || '' }}
@@ -120,11 +120,11 @@ jobs:
        uses: ./tooling/github/setup

      - name: Set up Docker Buildx
-        if: '!env.ACT'
+        if: "!env.ACT"
        uses: docker/setup-buildx-action@v4

      - name: Build container once
-        if: '!env.ACT'
+        if: "!env.ACT"
        uses: docker/build-push-action@v7
        with:
          context: .
@@ -165,7 +165,7 @@ jobs:
            --tag homarr-ci --tag homarr-e2e "${secret_args[@]}" .

      - name: Cache Playwright browsers
-        if: '!env.ACT'
+        if: "!env.ACT"
        id: playwright-cache
        uses: actions/cache@v6
        with:
@@ -316,8 +316,8 @@ jobs:
        run: test -n "$PR_NUMBER" || { echo "pr_number is required for cleanup"; exit 1; }

      - name: Delete GHCR package version
-        if: '!env.ACT'
-        uses: actions/github-script@v8
+        if: "!env.ACT"
+        uses: actions/github-script@v9
        with:
          script: |
            const packageName = "homarr-test";
@@ -7,26 +7,9 @@ WORKDIR /app
 RUN apk add --no-cache libc6-compat curl bash && apk update

 RUN corepack enable pnpm
-COPY pnpm-lock.yaml pnpm-workspace.yaml package.json ./
-COPY patches ./patches
-# Workaround for pnpm/pnpm#5268: pnpm fetch crashes when patchedDependencies
-# are configured with nodeLinker: hoisted. The applyPatchToDir function tries
-# to chdir into node_modules/<pkg> which doesn't exist during fetch (only the
-# content-addressable store is populated). By temporarily switching to the
-# isolated linker, patches apply inside the virtual store (node_modules/.pnpm/...)
-# which IS created by pnpm fetch. The original hoisted linker is restored
-# before the install step so the final node_modules layout stays flat.
-RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store \
-    pnpm config set store-dir /pnpm/store && \
-    sed -i 's/nodeLinker: hoisted/nodeLinker: isolated/' pnpm-workspace.yaml && \
-    pnpm fetch && \
-    sed -i 's/nodeLinker: isolated/nodeLinker: hoisted/' pnpm-workspace.yaml
-
 COPY . .
-# Follow the pnpm fetch pattern from https://pnpm.io/cli/fetch
-# --frozen-lockfile is omitted as recommended by the pnpm fetch docs
 RUN --mount=type=cache,id=pnpm-store,target=/pnpm/store \
-    pnpm install --recursive
+    pnpm config set store-dir /pnpm/store && pnpm install --recursive --frozen-lockfile

 ARG SKIP_ENV_VALIDATION='true'
 ARG CI='true'
@@ -43,7 +43,7 @@
    "random-word-slugs": "^0.1.7",
    "react": "catalog:",
    "react-dom": "catalog:",
-    "swiper": "^14.0.5",
+    "swiper": "^14.0.2",
    "tailwindcss": "^4.3.2"
  },
  "devDependencies": {
@@ -6,7 +6,7 @@
  },
  "engines": {
    "node": ">=24.18.0",
-    "pnpm": ">=11.11.0"
+    "pnpm": ">=11.10.0"
  },
-  "packageManager": "pnpm@11.11.0"
+  "packageManager": "pnpm@11.10.0"
 }
@@ -69,7 +69,7 @@
  },
  "engines": {
    "node": ">=24.18.0",
-    "pnpm": ">=11.11.0"
+    "pnpm": ">=11.10.0"
  },
-  "packageManager": "pnpm@11.11.0"
+  "packageManager": "pnpm@11.10.0"
 }
@@ -18,7 +18,7 @@ catalog:
  "@gitbeaker/rest": ^43.8.0
  "@homarr/gridstack": ^1.12.0
  "@homarr/node-unifi": ^2.6.0
-  "@immich/sdk": ^3.0.2
+  "@immich/sdk": ^3.0.1
  "@jellyfin/sdk": ^0.13.0
  "@kubernetes/client-node": ^1.4.0
  "@modelcontextprotocol/sdk": 1.29.0
@@ -93,11 +93,11 @@ catalog:
  "@types/video.js": ^7.3.58
  "@types/ws": ^8.18.1
  "@types/xml2js": ^0.4.14
-  posthog-js: ^1.399.1
-  posthog-node: ^5.40.0
+  posthog-js: ^1.398.2
+  posthog-node: ^5.39.2
  "@vitejs/plugin-react": ^6.0.3
-  "@vitest/coverage-v8": ^4.1.10
-  "@vitest/ui": ^4.1.10
+  "@vitest/coverage-v8": ^4.1.9
+  "@vitest/ui": ^4.1.9
  "@xterm/addon-canvas": ^0.7.0
  "@xterm/addon-fit": 0.11.0
  "@xterm/xterm": ^6.0.0
@@ -139,20 +139,20 @@ catalog:
  jsonpath-plus: ^10.4.0
  ldapts: 8.1.8
  lodash.clonedeep: ^4.5.0
-  lucide-react: ^1.24.0
+  lucide-react: ^1.23.0
  "mantine-contextmenu": ^9.3.1
  mantine-datatable: ^9.3.1
  mantine-react-table: npm:mantine-react-table-open@9.0.3
  mcp-handler: ^1.1.0
  maria2: ^0.4.1
-  mysql2: 3.22.6
+  mysql2: 3.22.5
  next: 16.2.10
  next-auth: 5.0.0-beta.31
  next-intl: 4.13.1
  node-loader: ^2.1.0
  octokit: ^5.0.5
  oxfmt: ^0.58.0
-  oxlint: ^1.73.0
+  oxlint: ^1.72.0
  pg: ^8.22.0
  postcss-preset-mantine: ^1.18.0
  prismjs: ^1.30.0
@@ -177,13 +177,13 @@ catalog:
  tsdav: ^2.3.0
  tsx: 4.20.4
  turbo: ^2.10.4
-  typescript: "npm:@typescript/typescript6@^6.0.2"
-  vite: ^8.1.4
+  typescript: ^7.0.0
+  vite: ^8.1.2
  undici: 7.28.0
  use-deep-compare-effect: ^1.8.1
  video.js: ^8.23.9
  vite-tsconfig-paths: ^6.1.1
-  vitest: ^4.1.10
+  vitest: ^4.1.9
  winston: 3.19.0
  ws: ^8.21.0
  xml2js: ^0.6.2
@@ -229,7 +229,7 @@ overrides:
  "tar-fs@>=3.0.0 <3.0.9": ">=3.1.3"
  "tar-fs@>=2.0.0 <2.1.3": ">=3.1.3"
  "tmp@<=0.2.3": ">=0.2.7"
-  "vite@>=5.0.0 <=5.4.18": ">=8.1.4"
+  "vite@>=5.0.0 <=5.4.18": ">=8.1.3"
 patchedDependencies:
  "@types/node-unifi": "patches/@types__node-unifi.patch"
  "trpc-to-openapi": "patches/trpc-to-openapi.patch"